Privacy Policy

1. Who We Are

Iron Circuit is a kettlebell strength and conditioning studio located at Kikar HaMedina, Tel Aviv, Israel. We operate group training sessions, personal training, and youth fitness classes.

Data Controller: Iron Circuit, Tel Aviv.

Contact: Dyfit83@gmail.com | 054-686-5682

2. What Personal Data We Collect

We collect the following categories of personal data when you register, book a session, or contact us:

Identity data: Full name, date of birth.

Contact data: Phone number, email address, WhatsApp contact.

Health and fitness data: Relevant medical history, fitness background, and assessment results. This is classified as sensitive data under the PPL and is collected only with your explicit consent.

Financial data: Payment records. We do not store full card details — payments are processed via third-party providers.

Digital identifiers: IP address, device type, and usage data collected when you visit our website. This is personal data under Amendment No. 13.

Communications: Messages sent to us via WhatsApp, email, or through our website contact form.

3. Why We Collect It and Our Legal Basis

We collect and use your personal data only for specified, legitimate purposes. Under the PPL as amended, our legal bases are:

Performance of a contract: To manage your membership, book sessions, and deliver our services.

Informed consent: For health and fitness data, marketing communications, and any other processing where consent is required. You may withdraw consent at any time.

Legal obligation: To comply with applicable Israeli law, including tax and business record requirements.

Legitimate interest: To improve our services, manage our business, and ensure the safety of members — provided this does not override your rights.

We do not repurpose your data for uses beyond those stated here without seeking fresh consent.

4. Sensitive Data

Health, fitness, and medical information you provide is classified as especially sensitive data under Amendment No. 13. We collect this data only with your explicit, separate consent. It is used solely to ensure your safety during training and to tailor your programme appropriately. We do not share this data with third parties except where required by law or in a medical emergency.

5. How We Use Your Data

Your data is used to:

- Manage your membership and training programme.

- Book and confirm sessions.

- Send you updates about your training, schedule changes, or new programmes.

- Process payments.

- Respond to your enquiries.

- Improve our services based on aggregate, anonymised usage data.

- Comply with our legal obligations.

We do not sell your personal data. We do not share it with advertisers or data brokers.

6. Who We Share Your Data With

We share your data only where necessary:

Payment processors: To process membership and session fees securely.

Scheduling and booking platforms: To manage session bookings (e.g. your name and contact details with our booking system provider).

Legal authorities: Where required by Israeli law or a valid court order.

All third parties we work with are required to handle your data securely and only for the purposes we specify.

7. International Data Transfers

If we use any third-party tools that process data outside of Israel (for example, cloud services or booking platforms), we ensure those transfers are made only to countries or services with an adequate level of data protection, in accordance with the Protection of Privacy Regulations (Transfer Abroad, 5761-2001).

8. How Long We Keep Your Data

We retain your personal data only as long as necessary for the purpose for which it was collected, or as required by law. In general:

Membership and training records: Retained for the duration of your membership plus 7 years for legal and tax purposes.

Health and fitness assessments: Retained while you are an active member. Deleted within 12 months of membership ending unless you request otherwise.

Marketing communications: Until you withdraw consent.

Website usage data: Up to 12 months.

9. Your Rights

Under the PPL as amended by Amendment No. 13, you have the following rights:

Right to access: You can request a copy of the personal data we hold about you.

Right to rectification: You can ask us to correct inaccurate or incomplete data.

Right to erasure: You can ask us to delete your personal data where there is no compelling reason to retain it.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Right to object: You can object to processing based on legitimate interest.

Right to data portability: You can request your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact us at: Dyfit83@gmail.com
We will respond within 30 days. If you are unsatisfied with our response, you have the right to file a complaint with the Privacy Protection Authority (PPA) of Israel at www.gov.il/ppa.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Access to personal data is restricted to those who need it to deliver our services. In the event of a data breach that poses a risk to your rights, we will notify the PPA and, where required, notify you directly.

11. Cookies and Website Data

Our website may use cookies and similar technologies to collect data about how visitors use the site. This may include IP addresses, browser type, and pages visited. You can manage cookie preferences through your browser settings. We will update this policy if we introduce a formal cookie consent mechanism on the site.

12. Children

We offer supervised youth fitness classes for ages 13–16. For participants under 18, we collect parental or guardian consent before collecting or processing any personal data. Health and fitness data for minors is treated as especially sensitive and handled with additional safeguards.